Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: idlL6uJ1fLtg3s5hP1/FKXsHpOSzODtdXoULFo8anVM=
Subject key identifier: 54:C6:52:CB:B7:54:DD:B2:4E:07:87:96:73:C8:06:62:1C:D3:BD:F8
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 019A07EE9033E71FF37F7769E39DFC300434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 0440
Signing time: Tue 21 Oct 2025 18:01:06 +0000
Manifest this update: Tue 21 Oct 2025 18:01:06 +0000
Manifest next update: Wed 22 Oct 2025 18:01:06 +0000
Files and hashes: 1: 5TxBRMul-Sk6vrxAy-O3Gig1UHg.roa (hash: eQW3KPMxFJcTn3nfO5KDUYdR77aYysAZcOPu9j2QK1w=)
2: NnS9tE0Wd3GJX8d4rDN6hefth0k.roa (hash: iMULd1rU9nLxXdG6/iod6VTsBhibbUWJ3DwkFA8v85s=)
3: R5EoUABcKiwLg06w_OxlkJfMqUk.roa (hash: irt2J6S0P6bVoeLD1I6fHpK1oay2SiSe0bMOlV1dUxk=)
4: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: e2LaP7Kh4qCoa15Nhedzo5xwfDje1+PPfoXScvASEH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:ee:90:33:e7:1f:f3:7f:77:69:e3:9d:fc:30:04:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Oct 21 18:01:06 2025 GMT
Not After : Oct 22 18:01:06 2025 GMT
Subject: CN=54c652cbb754ddb24e07879673c806621cd3bdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:70:f4:3d:b7:b7:6e:52:18:f9:c8:11:e4:8f:
83:08:a9:56:f4:61:94:4a:d8:58:16:06:74:5e:70:
e6:6d:9e:56:fc:14:ab:cf:2c:c8:e3:bf:d0:5c:3d:
e1:32:a0:b1:c1:62:e8:6c:af:f2:7f:13:d6:4b:46:
a0:5b:5a:bc:4b:a0:55:0c:62:f7:4d:8a:a6:2c:23:
09:d3:27:45:51:c2:82:47:90:be:e4:3f:c0:88:93:
2f:9e:3b:25:fc:b3:3d:89:0b:a8:d5:bd:a7:af:3f:
77:f6:a1:43:81:e1:26:98:48:42:db:e4:b6:ca:92:
46:82:17:90:0a:20:1d:7d:31:11:5f:80:7e:76:85:
bb:72:64:e1:ec:49:98:8a:a2:b8:05:0f:d8:07:40:
13:57:11:cb:d7:4c:84:a2:31:37:2f:1a:aa:82:a6:
8a:fc:5d:ac:d2:88:ce:04:11:6b:dd:5d:50:a4:11:
7f:eb:d1:68:14:b2:ad:b0:e9:60:b0:a5:d2:c2:c9:
8d:53:d7:b3:7e:8a:b4:c5:ed:b9:86:77:74:97:db:
2e:9d:ce:e6:4a:68:00:1d:44:af:e8:11:07:47:7e:
9c:93:7c:06:a8:78:a6:30:73:6a:33:d8:de:27:18:
06:c4:52:35:8e:f7:e7:42:e0:a7:85:51:6b:6c:2a:
42:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C6:52:CB:B7:54:DD:B2:4E:07:87:96:73:C8:06:62:1C:D3:BD:F8
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e9:30:e5:56:e9:43:5b:1a:b1:95:60:1c:b5:ef:e9:81:a1:
ba:4e:17:34:4f:b6:b7:74:1d:cc:b4:c4:a4:8f:c6:b1:06:8a:
29:23:bd:0a:fb:52:ef:4d:c5:1a:d3:31:fb:9d:fd:c8:40:a3:
76:40:7c:ba:85:1f:9b:0c:b7:c1:ba:e9:12:44:d7:f5:68:91:
94:b4:79:d0:7a:e9:d2:0e:d2:fb:ad:3e:e9:b4:41:3d:6e:ee:
bf:df:04:60:5b:80:ac:31:73:f7:11:7f:e2:f0:d0:70:1a:ce:
64:c1:b2:09:70:d3:e8:c7:23:a8:49:e1:45:10:29:3d:ab:dc:
9e:f8:49:5b:ed:e0:26:c1:91:92:46:e8:03:32:ce:6b:46:43:
8d:43:48:f3:34:9b:9c:2f:2c:93:80:ff:6b:52:5d:6c:d3:63:
05:14:24:2c:1c:7b:91:55:d9:a6:cd:34:e6:d2:65:ee:c4:59:
74:5b:f9:2b:43:9c:92:d4:a6:55:2a:39:a8:6e:bd:af:50:e8:
85:5f:2a:6f:e6:18:c6:3a:57:ea:bd:66:81:8b:40:6b:f3:c1:
61:fc:91:4c:90:3c:9d:7c:b7:cc:11:f9:bd:59:a2:25:af:61:
00:68:61:78:4b:36:23:c3:12:dc:aa:1b:b2:9a:54:73:29:5b:
80:af:55:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 23:38:00 2025 by rpki-client